{"id":"e4be1136-1dc6-4686-b579-d40f2b07edc8","shortId":"QdcgJg","kind":"skill","title":"cometchat-flutter-v6-production","tagline":"Production readiness for CometChat Flutter UIKit v6 — server-side auth tokens, user management, Android ProGuard/R8, iOS Info.plist, minSdk, release build checklist, environment configuration, and security hardening. Use when preparing a CometChat Flutter app for production deplo","description":"# CometChat Flutter UIKit v6 — Production Readiness\n\nEverything you need to move a CometChat Flutter app from development to production. Covers authentication, platform configuration, environment management, and security hardening.\n\n---\n\n## 1. Dev Mode vs Production\n\nCometChat supports two authentication modes. Understanding the difference is critical before shipping.\n\n### Dev Mode (authKey — development only)\n\nThe `authKey` is embedded in client code and lets any user log in by UID alone. Convenient for prototyping, but **anyone who decompiles your app can impersonate any user**.\n\n```dart\n// ✅ Dev mode — fine for prototyping, NEVER ship this\nfinal settings = (UIKitSettingsBuilder()\n      ..appId = 'APP_ID'\n      ..region = 'us'\n      ..authKey = 'AUTH_KEY'  // Client-side secret — dev only\n      ..subscriptionType = CometChatSubscriptionType.allUsers)\n    .build();\n\nawait CometChatUIKit.init(uiKitSettings: settings);\n\n// Login with authKey (SDK uses the key from UIKitSettings internally)\nawait CometChatUIKit.login('user_uid',\n  onSuccess: (user) => debugPrint('Logged in: ${user.name}'),\n  onError: (e) => debugPrint('Login failed: ${e.message}'),\n);\n```\n\n### Production Mode (authToken — server-minted)\n\nYour backend generates a short-lived `authToken` for each authenticated user. The client never sees the `authKey`.\n\n```dart\n// ✅ Production — authKey is NOT in client code\nfinal settings = (UIKitSettingsBuilder()\n      ..appId = 'APP_ID'\n      ..region = 'us'\n      // No authKey here — tokens come from your server\n      ..subscriptionType = CometChatSubscriptionType.allUsers)\n    .build();\n\nawait CometChatUIKit.init(uiKitSettings: settings);\n\n// Login with server-provided token\nfinal authToken = await yourBackend.getCometChatToken(currentUserId);\nawait CometChatUIKit.loginWithAuthToken(authToken,\n  onSuccess: (user) => debugPrint('Logged in: ${user.name}'),\n  onError: (e) => debugPrint('Login failed: ${e.message}'),\n);\n```\n\n**Rule**: If `authKey` appears anywhere in your production build, you have a security vulnerability.\n\n---\n\n## 2. Server-Side Auth Token Flow\n\n### How It Works\n\n```\n┌──────────┐     1. Authenticate      ┌──────────────┐\n│  Flutter  │ ──────────────────────>  │  Your Server │\n│   App     │                          │  (Backend)   │\n│           │  4. Return authToken     │              │\n│           │ <──────────────────────  │              │\n└──────────┘                          └──────────────┘\n     │                                       │\n     │ 5. loginWithAuthToken(token)          │ 2. Verify user identity\n     │                                       │ 3. POST /auth-tokens\n     v                                       v\n┌──────────┐                          ┌──────────────┐\n│ CometChat│                          │  CometChat   │\n│   SDK    │                          │  REST API    │\n└──────────┘                          └──────────────┘\n```\n\n### Step 1: Your Backend Generates the Token\n\nYour server calls the CometChat REST API with the `authKey` (which stays server-side):\n\n```bash\ncurl -X POST \"https://API_REGION.cometchat.io/v3/users/USER_UID/auth_tokens\" \\\n  -H \"appId: YOUR_APP_ID\" \\\n  -H \"apiKey: YOUR_AUTH_KEY\" \\\n  -H \"Content-Type: application/json\"\n```\n\nResponse:\n```json\n{\n  \"data\": {\n    \"uid\": \"user_uid\",\n    \"authToken\": \"user_uid_1a2b3c4d5e6f7a8b9c0d1e2f\",\n    \"createdAt\": 1700000000\n  }\n}\n```\n\nReplace `API_REGION` with your region endpoint:\n- US: `api-us.cometchat.io`\n- EU: `api-eu.cometchat.io`\n- IN: `api-in.cometchat.io`\n\n### Step 2: Your Backend Returns the Token to the Client\n\nYour Flutter app calls your own backend (after the user authenticates with your auth system), and your backend returns the CometChat `authToken`.\n\n### Step 3: Flutter Client Logs In with the Token\n\n```dart\nFuture<void> loginWithToken(String uid) async {\n  // 1. Call YOUR backend to get a CometChat auth token\n  final response = await http.post(\n    Uri.parse('https://your-api.com/cometchat/token'),\n    headers: {'Authorization': 'Bearer ${yourJwt}'},\n    body: jsonEncode({'uid': uid}),\n  );\n  final authToken = jsonDecode(response.body)['authToken'];\n\n  // 2. Login to CometChat with the token\n  CometChatUIKit.loginWithAuthToken(authToken,\n    onSuccess: (user) {\n      // CometChatUIKit.loggedInUser is now set\n      debugPrint('Logged in as ${user.name}');\n    },\n    onError: (e) {\n      debugPrint('CometChat login failed: ${e.message}');\n    },\n  );\n}\n```\n\n**Note**: `loginWithAuthToken` populates `CometChatUIKit.loggedInUser` before calling `onSuccess` — same as `login()` and `init()`. No need to call `getLoggedInUser()` afterward.\n\n---\n\n## 3. User Management\n\n### Creating Users\n\n```dart\nfinal user = User(\n  uid: 'user_123',\n  name: 'Jane Doe',\n  avatar: 'https://example.com/avatar.png',\n);\n\nawait CometChatUIKit.createUser(user,\n  onSuccess: (created) => debugPrint('Created: ${created.uid}'),\n  onError: (e) => debugPrint('Create failed: ${e.message}'),\n);\n```\n\n### Updating Users\n\n```dart\nfinal user = User(\n  uid: 'user_123',\n  name: 'Jane Smith',  // Updated name\n);\n\nawait CometChatUIKit.updateUser(user,\n  onSuccess: (updated) => debugPrint('Updated: ${updated.name}'),\n  onError: (e) => debugPrint('Update failed: ${e.message}'),\n);\n```\n\n### Production Warning\n\n`createUser()` and `updateUser()` require the `authKey` (set in UIKitSettings). In production:\n\n- **Move user creation to your backend** — call the CometChat REST API server-side\n- **Move user updates to your backend** — same approach\n- The Flutter client should only call `loginWithAuthToken()` — never create or update users directly\n\nServer-side user creation:\n```bash\ncurl -X POST \"https://API_REGION.cometchat.io/v3/users\" \\\n  -H \"appId: YOUR_APP_ID\" \\\n  -H \"apiKey: YOUR_AUTH_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"uid\": \"user_123\", \"name\": \"Jane Doe\"}'\n```\n\n---\n\n## 4. Android Build Requirements\n\nThese are required for CometChat UIKit v6 on Android. Without them, debug builds may work but release builds will crash.\n\n### gradle.properties\n\nEnsure these are in `android/gradle.properties`:\n\n```properties\nandroid.useAndroidX=true\nandroid.enableJetifier=true\n```\n\n`enableJetifier` resolves old Android Support Library conflicts from transitive dependencies in the CometChat SDK.\n\n### minSdk 26\n\nIn `android/app/build.gradle` (Groovy) or `build.gradle.kts` (Kotlin DSL):\n\n```kotlin\n// build.gradle.kts\nandroid {\n    defaultConfig {\n        minSdk = 26  // Required by cometchat_calls_sdk\n    }\n}\n```\n\n```groovy\n// build.gradle (Groovy)\nandroid {\n    defaultConfig {\n        minSdkVersion 26\n    }\n}\n```\n\nIf your `minSdk` is lower than 26, the build will fail with a manifest merger error referencing `cometchat_calls_sdk`.\n\n### ProGuard / R8 Keep Rules\n\nCreate `android/app/proguard-rules.pro` with these exact contents:\n\n```proguard\n# CometChat — prevent R8 from stripping SDK classes used via reflection\n-keep class com.cometchat.** { *; }\n-keep interface com.cometchat.** { *; }\n\n# Suppress warnings for Calls SDK classes referenced cross-module\n-dontwarn com.cometchat.calls.CometChatRTCView$CometChatRTCViewBuilder\n-dontwarn com.cometchat.calls.CometChatRTCView\n-dontwarn com.cometchat.calls.CometChatRTCViewListener\n-dontwarn com.cometchat.calls.model.AnalyticsSettings\n-dontwarn com.cometchat.calls.model.RTCCallback\n-dontwarn com.cometchat.calls.model.RTCReceiver\n```\n\nReference the ProGuard file in your release build type. In `android/app/build.gradle.kts`:\n\n```kotlin\nandroid {\n    buildTypes {\n        release {\n            isMinifyEnabled = true\n            isShrinkResources = true\n            proguardFiles(\n                getDefaultProguardFile(\"proguard-android-optimize.txt\"),\n                \"proguard-rules.pro\"\n            )\n        }\n    }\n}\n```\n\nOr in `android/app/build.gradle` (Groovy):\n\n```groovy\nandroid {\n    buildTypes {\n        release {\n            minifyEnabled true\n            shrinkResources true\n            proguardFiles getDefaultProguardFile('proguard-android-optimize.txt'), 'proguard-rules.pro'\n        }\n    }\n}\n```\n\n**Without these rules, release builds crash with `ClassNotFoundException` for CometChat classes.** Debug builds work fine because R8/ProGuard only runs on release.\n\n### Multidex (if targeting API < 21 elsewhere)\n\nCometChat requires minSdk 26, so multidex is not needed (it's automatic above API 21). If you have a multi-module setup where another module targets lower, ensure the app module still sets `minSdk = 26`.\n\n---\n\n## 5. iOS Build Requirements\n\n### Info.plist Permissions\n\nAdd these to `ios/Runner/Info.plist` inside the top-level `<dict>`:\n\n```xml\n<!-- Camera access (video calls, sending photos) -->\n<key>NSCameraUsageDescription</key>\n<string>$(PRODUCT_NAME) needs camera access for video calls and sending photos</string>\n\n<!-- Microphone access (voice/video calls, audio messages) -->\n<key>NSMicrophoneUsageDescription</key>\n<string>$(PRODUCT_NAME) needs microphone access for voice and video calls</string>\n\n<!-- Photo library access (sending images from gallery) -->\n<key>NSPhotoLibraryUsageDescription</key>\n<string>$(PRODUCT_NAME) needs photo library access to send images</string>\n```\n\nWithout these, the app crashes when the user taps the camera/gallery/mic button — iOS terminates apps that access protected APIs without a usage description.\n\n### VoIP Background Mode (for CallKit)\n\nIf using CometChat calling with CallKit (incoming call notifications when app is backgrounded), add to `Info.plist`:\n\n```xml\n<key>UIBackgroundModes</key>\n<array>\n    <string>voip</string>\n    <string>remote-notification</string>\n</array>\n```\n\nOr enable via Xcode: Target → Signing & Capabilities → + Background Modes → check \"Voice over IP\" and \"Remote notifications\".\n\n### App Transport Security\n\nCometChat uses HTTPS by default, so no ATS exceptions are needed. If you're loading user avatars or media from HTTP URLs (not recommended), add:\n\n```xml\n<key>NSAppTransportSecurity</key>\n<dict>\n    <key>NSAllowsArbitraryLoads</key>\n    <true/>\n</dict>\n```\n\n**Avoid this in production** — it disables all transport security. Instead, ensure all media URLs use HTTPS.\n\n### Minimum iOS Deployment Target\n\nIn `ios/Podfile`, ensure:\n\n```ruby\nplatform :ios, '13.0'\n```\n\nCometChat UIKit v6 requires iOS 13.0+. If your Podfile has a lower target, `pod install` will fail.\n\n---\n\n## 6. Environment Configuration\n\nNever hardcode credentials in source code. The `AppCredentials` pattern used in development:\n\n```dart\n// ❌ DON'T ship this — credentials visible in decompiled binary\nclass AppCredentials {\n  static const String appId = '26580020f03ff346';\n  static const String region = 'in';\n  static const String authKey = '4152b0366478871f0fa8d19a287dd6f5ed5f8eff';\n}\n```\n\n### Option A: Dart Defines (recommended for simple setups)\n\nPass credentials at build time:\n\n```bash\nflutter run \\\n  --dart-define=COMETCHAT_APP_ID=your_app_id \\\n  --dart-define=COMETCHAT_REGION=us\n```\n\nRead them in code:\n\n```dart\nclass CometChatConfig {\n  static const appId = String.fromEnvironment('COMETCHAT_APP_ID');\n  static const region = String.fromEnvironment('COMETCHAT_REGION');\n  // No authKey in production builds — use authToken flow\n}\n```\n\nFor release builds:\n\n```bash\nflutter build apk \\\n  --dart-define=COMETCHAT_APP_ID=your_app_id \\\n  --dart-define=COMETCHAT_REGION=us\n\nflutter build ipa \\\n  --dart-define=COMETCHAT_APP_ID=your_app_id \\\n  --dart-define=COMETCHAT_REGION=us\n```\n\n### Option B: .env File with flutter_dotenv\n\n```bash\ndart pub add flutter_dotenv\n```\n\nCreate `.env` (add to `.gitignore`):\n\n```\nCOMETCHAT_APP_ID=your_app_id\nCOMETCHAT_REGION=us\n```\n\nLoad in code:\n\n```dart\nimport 'package:flutter_dotenv/flutter_dotenv.dart';\n\nFuture<void> main() async {\n  await dotenv.load(fileName: '.env');\n  runApp(const MyApp());\n}\n\nclass CometChatConfig {\n  static String get appId => dotenv.env['COMETCHAT_APP_ID'] ?? '';\n  static String get region => dotenv.env['COMETCHAT_REGION'] ?? 'us';\n}\n```\n\n**Note**: `.env` files bundled in the app asset can still be extracted. For true secret protection, fetch config from your backend at runtime.\n\n### Option C: Flavor-Based Configuration\n\nFor apps with dev/staging/prod environments:\n\n```dart\nenum Environment { dev, staging, prod }\n\nclass CometChatConfig {\n  final String appId;\n  final String region;\n  final bool useAuthToken; // true for staging/prod\n\n  const CometChatConfig._({\n    required this.appId,\n    required this.region,\n    required this.useAuthToken,\n  });\n\n  static CometChatConfig of(Environment env) {\n    switch (env) {\n      case Environment.dev:\n        return const CometChatConfig._(\n          appId: 'dev_app_id',\n          region: 'us',\n          useAuthToken: false,\n        );\n      case Environment.staging:\n        return const CometChatConfig._(\n          appId: 'staging_app_id',\n          region: 'us',\n          useAuthToken: true,\n        );\n      case Environment.prod:\n        return const CometChatConfig._(\n          appId: 'prod_app_id',\n          region: 'us',\n          useAuthToken: true,\n        );\n    }\n  }\n}\n```\n\n---\n\n## 7. Release Build Checklist\n\n### Authentication\n- [ ] `authKey` is NOT in any client-side code for production builds\n- [ ] Server-side auth token generation is implemented and tested\n- [ ] `CometChatUIKit.loginWithAuthToken()` is used instead of `CometChatUIKit.login()`\n- [ ] User creation/update calls are server-side, not client-side\n\n### Android\n- [ ] `minSdk = 26` in `android/app/build.gradle`\n- [ ] `android.enableJetifier=true` in `gradle.properties`\n- [ ] `proguard-rules.pro` created with CometChat keep rules\n- [ ] Release build type references `proguard-rules.pro`\n- [ ] `isMinifyEnabled = true` and `isShrinkResources = true` for release\n- [ ] Release APK/AAB tested on a real device (not just debug)\n- [ ] Push notification provider ID configured (FCM)\n\n### iOS\n- [ ] `NSCameraUsageDescription` in Info.plist\n- [ ] `NSMicrophoneUsageDescription` in Info.plist\n- [ ] `NSPhotoLibraryUsageDescription` in Info.plist\n- [ ] VoIP background mode enabled (if using CallKit)\n- [ ] Minimum deployment target is iOS 13.0+\n- [ ] Release build tested on a real device\n- [ ] Push notification entitlements configured (APNs)\n\n### Environment\n- [ ] No hardcoded credentials in source code\n- [ ] Credentials passed via dart-define, .env, or flavor config\n- [ ] `.env` files are in `.gitignore`\n- [ ] Production app ID and region are correct (not dev/staging)\n\n### CometChat Configuration\n- [ ] `CometChatUIKit.init()` called before any login or component usage\n- [ ] `subscriptionType` set in UIKitSettingsBuilder (or presence events won't fire)\n- [ ] `region` is lowercase (`'us'`, `'eu'`, `'in'`)\n- [ ] Logout properly calls `CometChatUIKit.logout()` and clears local state\n\n### Testing\n- [ ] Release build tested end-to-end: init → login → send message → receive message → logout\n- [ ] Tested on both Android and iOS physical devices\n- [ ] Tested with ProGuard/R8 enabled (Android release)\n- [ ] Tested push notifications in production environment\n- [ ] Tested calling features if enabled (audio + video)\n- [ ] Tested app kill → reopen → session restore (cached login via `CometChatUIKit.loggedInUser`)\n\n---\n\n## 8. Security Hardening\n\n### Never Ship authKey in Production\n\nThe `authKey` allows anyone to:\n- Log in as any user\n- Create users\n- Update user profiles\n\nIf it's in your APK/IPA, it can be extracted in minutes with standard decompilation tools.\n\n```dart\n// ❌ SECURITY VULNERABILITY — authKey in client code\nfinal settings = (UIKitSettingsBuilder()\n      ..appId = 'APP_ID'\n      ..region = 'us'\n      ..authKey = 'AUTH_KEY_VISIBLE_TO_ATTACKERS')\n    .build();\n\n// ✅ SECURE — no authKey, use server-minted tokens\nfinal settings = (UIKitSettingsBuilder()\n      ..appId = appId   // App ID is not secret (it's in network requests anyway)\n      ..region = region\n      ..subscriptionType = CometChatSubscriptionType.allUsers)\n    .build();\n```\n\n### Don't Log Sensitive Data\n\n```dart\n// ❌ WRONG — auth tokens in logs\ndebugPrint('Token: $authToken');\ndebugPrint('User: ${user.toJson()}'); // May contain tokens\n\n// ✅ CORRECT — log only non-sensitive identifiers\ndebugPrint('Logged in as uid: ${user.uid}');\n```\n\nIn release builds, consider disabling debug prints entirely:\n\n```dart\n// In main.dart for release\nif (kReleaseMode) {\n  debugPrint = (String? message, {int? wrapWidth}) {};\n}\n```\n\n### ProGuard Obfuscation\n\nThe ProGuard rules in Section 4 keep CometChat classes intact (required for the SDK to work), but R8 will still obfuscate your own application code. This makes reverse engineering harder.\n\nEnsure `isMinifyEnabled = true` is set for release builds — it enables both code shrinking and obfuscation.\n\n### Token Expiry and Refresh\n\nCometChat auth tokens don't expire by default, but you can configure token expiry in the CometChat dashboard. If you enable expiry:\n\n```dart\nCometChatUIKit.loginWithAuthToken(authToken,\n  onSuccess: (user) {\n    // Token accepted, proceed\n  },\n  onError: (e) {\n    if (e.code == 'ERR_AUTH_TOKEN_NOT_FOUND' || e.code == 'AUTH_ERR_AUTH_TOKEN_NOT_FOUND') {\n      // Token expired or invalid — fetch a new one from your backend\n      refreshAndRetryLogin();\n    }\n  },\n);\n```\n\n### Network Security\n\n- CometChat SDK uses HTTPS/WSS by default — no additional configuration needed\n- Don't add `NSAllowsArbitraryLoads` to Info.plist unless absolutely necessary\n- If using a proxy or custom certificate pinning, ensure CometChat domains are whitelisted:\n  - `*.cometchat.io`\n  - `*.cometchat.com`\n\n### Session Management\n\n```dart\n// Always logout when user signs out of your app\nFuture<void> signOut() async {\n  // 1. Logout from CometChat\n  CometChatUIKit.logout(\n    onSuccess: (_) => debugPrint('CometChat logout success'),\n    onError: (e) => debugPrint('CometChat logout failed: ${e.message}'),\n  );\n\n  // 2. Clear your own auth state\n  await yourAuthService.signOut();\n\n  // 3. Navigate to login screen\n  navigator.pushReplacementNamed('/login');\n}\n```\n\nDon't just navigate away — always call `CometChatUIKit.logout()` to clear the SDK session, disconnect WebSocket, and remove cached credentials.","tags":["cometchat","flutter","production","skills","agent-skills","ai-agent","chat","claude-code","cursor","messaging","nextjs","react"],"capabilities":["skill","source-cometchat","skill-cometchat-flutter-v6-production","topic-agent-skills","topic-ai-agent","topic-chat","topic-claude-code","topic-cometchat","topic-cursor","topic-messaging","topic-nextjs","topic-react","topic-react-native","topic-ui-kit"],"categories":["cometchat-skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/cometchat/cometchat-skills/cometchat-flutter-v6-production","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add cometchat/cometchat-skills","source_repo":"https://github.com/cometchat/cometchat-skills","install_from":"skills.sh"}},"qualityScore":"0.463","qualityRationale":"deterministic score 0.46 from registry signals: · indexed on github topic:agent-skills · 27 github stars · SKILL.md body (18,084 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:04:51.955Z","embedding":null,"createdAt":"2026-05-07T13:05:11.944Z","updatedAt":"2026-05-18T19:04:51.955Z","lastSeenAt":"2026-05-18T19:04:51.955Z","tsv":"'/auth-tokens':305 '/avatar.png'',':523 '/cometchat/token''),':446 '/login':1971 '/v3/users':625 '/v3/users/user_uid/auth_tokens':341 '1':71,286,314,429,1940 '123':516,546,644 '13.0':1068,1074,1507 '1700000000':368 '1a2b3c4d5e6f7a8b9c0d1e2f':366 '2':276,299,383,460,1957 '21':858,874 '26':698,711,723,730,863,895,1444 '26580020f03ff346':1117 '3':303,415,505,1965 '4':293,648,1787 '4152b0366478871f0fa8d19a287dd6f5ed5f8eff':1127 '5':296,896 '6':1086 '7':1398 '8':1637 'absolut':1908 'accept':1859 'access':917,929,941,961 'add':902,986,1038,1237,1242,1903 'addit':1898 'afterward':504 'allow':1647 'alon':108 'alway':1928,1977 'android':20,649,660,686,708,720,806,822,1442,1603,1612 'android.enablejetifier':681,1447 'android.useandroidx':679 'android/app/build.gradle':700,819,1446 'android/app/build.gradle.kts':804 'android/app/proguard-rules.pro':749 'android/gradle.properties':677 'anoth':884 'anyon':113,1648 'anyway':1721 'anywher':266 'api':312,326,370,589,857,873,963 'api-eu.cometchat.io':379 'api-in.cometchat.io':381 'api-us.cometchat.io':377 'api_region.cometchat.io':340,624 'api_region.cometchat.io/v3/users':623 'api_region.cometchat.io/v3/users/user_uid/auth_tokens':339 'apikey':348,632 'apk':1193 'apk/aab':1470 'apk/ipa':1665 'apn':1519 'app':39,57,117,135,217,291,345,394,629,890,948,959,983,1011,1148,1151,1171,1198,1201,1216,1219,1246,1249,1280,1296,1320,1366,1379,1392,1543,1628,1687,1711,1936 'appcredenti':1096,1112 'appear':265 'appid':134,216,343,627,1116,1168,1277,1334,1364,1377,1390,1686,1709,1710 'applic':1805 'application/json':356,640 'approach':600 'asset':1297 'async':428,1264,1939 'at':1021 'attack':1696 'audio':1625 'auth':16,140,280,350,405,437,634,1418,1692,1734,1832,1866,1871,1873,1961 'authent':63,79,197,287,402,1402 'authkey':90,94,139,157,204,207,222,264,329,573,1126,1180,1403,1642,1646,1679,1691,1700 'author':448 'authtoken':183,194,243,249,295,363,413,456,459,468,1185,1740,1855 'automat':871 'avatar':520,1030 'avoid':1042 'await':151,165,232,244,247,441,524,552,1265,1963 'away':1976 'b':1228 'backend':188,292,316,385,398,409,432,584,598,1310,1887 'background':969,985,1002,1496 'base':1317 'bash':335,619,1141,1190,1234 'bearer':449 'binari':1110 'bodi':451 'bool':1339 'build':26,150,231,270,650,664,669,732,801,837,845,898,1139,1183,1189,1192,1210,1400,1414,1458,1509,1587,1697,1726,1762,1819 'build.gradle':718 'build.gradle.kts':703,707 'buildtyp':807,823 'bundl':1293 'button':956 'c':1314 'cach':1633,1989 'call':322,395,430,492,502,585,606,715,742,774,920,934,976,980,1433,1554,1579,1621,1978 'callkit':972,978,1501 'camera':916 'camera/gallery/mic':955 'capabl':1001 'case':1359,1372,1385 'certif':1916 'check':1004 'checklist':27,1401 'class':761,766,776,843,1111,1164,1272,1330,1790 'classnotfoundexcept':840 'clear':1582,1958,1981 'client':98,143,200,211,391,417,603,1409,1440,1681 'client-sid':142,1408,1439 'code':99,212,1094,1162,1256,1411,1526,1682,1806,1823 'com.cometchat':767,770 'com.cometchat.calls.cometchatrtcview':782,785 'com.cometchat.calls.cometchatrtcviewlistener':787 'com.cometchat.calls.model.analyticssettings':789 'com.cometchat.calls.model.rtccallback':791 'com.cometchat.calls.model.rtcreceiver':793 'come':225 'cometchat':2,9,37,43,55,76,308,309,324,412,436,463,483,587,656,695,714,741,755,842,860,975,1014,1069,1147,1156,1170,1177,1197,1206,1215,1224,1245,1251,1279,1287,1454,1551,1789,1831,1847,1891,1919,1943,1947,1953 'cometchat-flutter-v6-production':1 'cometchat.com':1924 'cometchat.io':1923 'cometchatconfig':1165,1273,1331,1353 'cometchatconfig._':1345,1363,1376,1389 'cometchatrtcviewbuild':783 'cometchatsubscriptiontype.allusers':149,230,1725 'cometchatuikit.createuser':525 'cometchatuikit.init':152,233,1553 'cometchatuikit.loggedinuser':471,490,1636 'cometchatuikit.login':166,1430 'cometchatuikit.loginwithauthtoken':248,467,1425,1854 'cometchatuikit.logout':1580,1944,1979 'cometchatuikit.updateuser':553 'compon':1559 'config':1307,1536 'configur':29,65,1088,1318,1483,1518,1552,1842,1899 'conflict':689 'consid':1763 'const':1114,1119,1124,1167,1174,1270,1344,1362,1375,1388 'contain':1745 'content':354,638,753 'content-typ':353,637 'conveni':109 'correct':1548,1747 'cover':62 'crash':671,838,949 'creat':508,528,530,535,609,748,1240,1452,1655 'created.uid':531 'createdat':367 'createus':568 'creation':581,618 'creation/update':1432 'credenti':1091,1106,1137,1523,1527,1990 'critic':85 'cross':779 'cross-modul':778 'curl':336,620 'currentuserid':246 'custom':1915 'd':641 'dart':122,205,423,510,540,1101,1130,1145,1154,1163,1195,1204,1213,1222,1235,1257,1324,1531,1676,1732,1768,1853,1927 'dart-defin':1144,1153,1194,1203,1212,1221,1530 'dashboard':1848 'data':359,1731 'debug':663,844,1478,1765 'debugprint':171,177,252,258,475,482,529,534,557,562,1738,1741,1754,1775,1946,1952 'decompil':115,1109,1674 'default':1018,1838,1896 'defaultconfig':709,721 'defin':1131,1146,1155,1196,1205,1214,1223,1532 'depend':692 'deplo':42 'deploy':1060,1503 'descript':967 'dev':72,88,123,146,1327,1365 'dev/staging':1550 'dev/staging/prod':1322 'develop':59,91,1100 'devic':1475,1514,1607 'differ':83 'direct':613 'disabl':1047,1764 'disconnect':1985 'doe':519,647 'domain':1920 'dontwarn':781,784,786,788,790,792 'dotenv':1233,1239 'dotenv.env':1278,1286 'dotenv.load':1266 'dotenv/flutter_dotenv.dart':1261 'dsl':705 'e':176,257,481,533,561,1862,1951 'e.code':1864,1870 'e.message':180,261,486,537,565,1956 'elsewher':859 'embed':96 'enabl':996,1498,1611,1624,1821,1851 'enablejetifi':683 'end':1590,1592 'end-to-end':1589 'endpoint':375 'engin':1810 'ensur':673,888,1052,1064,1812,1918 'entir':1767 'entitl':1517 'enum':1325 'env':1229,1241,1268,1291,1356,1358,1533,1537 'environ':28,66,1087,1323,1326,1355,1520,1619 'environment.dev':1360 'environment.prod':1386 'environment.staging':1373 'err':1865,1872 'error':739 'eu':378,1575 'event':1567 'everyth':49 'exact':752 'example.com':522 'example.com/avatar.png'',':521 'except':1022 'expir':1836,1878 'expiri':1828,1844,1852 'extract':1301,1669 'fail':179,260,485,536,564,734,1085,1955 'fals':1371 'fcm':1484 'featur':1622 'fetch':1306,1881 'file':797,1230,1292,1538 'filenam':1267 'final':131,213,242,439,455,511,541,1332,1335,1338,1683,1706 'fine':125,847 'fire':1570 'flavor':1316,1535 'flavor-bas':1315 'flow':282,1186 'flutter':3,10,38,44,56,288,393,416,602,1142,1191,1209,1232,1238,1260 'found':1869,1876 'futur':424,1262,1937 'generat':189,317,1420 'get':434,1276,1284 'getdefaultproguardfil':814,830 'getloggedinus':503 'gitignor':1244,1541 'gradle.properties':672,1450 'groovi':701,717,719,820,821 'h':342,347,352,626,631,636 'hardcod':1090,1522 'harden':32,70,1639 'harder':1811 'header':447 'http':1034 'http.post':442 'https':1016,1057 'https/wss':1894 'id':136,218,346,630,1149,1152,1172,1199,1202,1217,1220,1247,1250,1281,1367,1380,1393,1482,1544,1688,1712 'ident':302 'identifi':1753 'imag':944 'imperson':119 'implement':1422 'import':1258 'incom':979 'info.plist':23,900,988,1488,1491,1494,1906 'init':498,1593 'insid':906 'instal':1083 'instead':1051,1428 'int':1778 'intact':1791 'interfac':769 'intern':164 'invalid':1880 'io':22,897,957,1059,1067,1073,1485,1506,1605 'ios/podfile':1063 'ios/runner/info.plist':905 'ip':1007 'ipa':1211 'isminifyen':809,1462,1813 'isshrinkresourc':811,1465 'jane':518,548,646 'json':358 'jsondecod':457 'jsonencod':452 'keep':746,765,768,1455,1788 'key':141,161,351,635,1693 'kill':1629 'kotlin':704,706,805 'kreleasemod':1774 'let':101 'level':910 'librari':688,940 'live':193 'load':1028,1254 'local':1583 'log':104,172,253,418,476,1650,1729,1737,1748,1755 'login':155,178,236,259,461,484,496,1557,1594,1634,1968 'loginwithauthtoken':297,488,607 'loginwithtoken':425 'logout':1577,1599,1929,1941,1948,1954 'lower':728,887,1080 'lowercas':1573 'main':1263 'main.dart':1770 'make':1808 'manag':19,67,507,1926 'manifest':737 'may':665,1744 'media':1032,1054 'merger':738 'messag':1596,1598,1777 'microphon':928 'minifyen':825 'minimum':1058,1502 'minsdk':24,697,710,726,862,894,1443 'minsdkvers':722 'mint':186,1704 'minut':1671 'mode':73,80,89,124,182,970,1003,1497 'modul':780,881,885,891 'move':53,579,593 'multi':880 'multi-modul':879 'multidex':854,865 'myapp':1271 'name':517,547,551,645,914,926,937 'navig':1966,1975 'navigator.pushreplacementnamed':1970 'necessari':1909 'need':51,500,868,915,927,938,1024,1900 'network':1719,1889 'never':128,201,608,1089,1640 'new':1883 'non':1751 'non-sensit':1750 'note':487,1290 'notif':981,994,1010,1480,1516,1616 'nsallowsarbitraryload':1041,1904 'nsapptransportsecur':1040 'nscamerausagedescript':912,1486 'nsmicrophoneusagedescript':924,1489 'nsphotolibraryusagedescript':935,1492 'obfusc':1781,1802,1826 'old':685 'one':1884 'onerror':175,256,480,532,560,1861,1950 'onsuccess':169,250,469,493,527,555,1856,1945 'option':1128,1227,1313 'packag':1259 'pass':1136,1528 'pattern':1097 'permiss':901 'photo':923,939 'physic':1606 'pin':1917 'platform':64,1066 'pod':1082 'podfil':1077 'popul':489 'post':304,338,622 'prepar':35 'presenc':1566 'prevent':756 'print':1766 'proceed':1860 'prod':1329,1391 'product':5,6,41,47,61,75,181,206,269,566,578,913,925,936,1045,1182,1413,1542,1618,1644 'profil':1659 'proguard':744,754,796,1780,1783 'proguard-android-optimize.txt':815,831 'proguard-rules.pro':816,832,1451,1461 'proguard/r8':21,1610 'proguardfil':813,829 'proper':1578 'properti':678 'protect':962,1305 'prototyp':111,127 'provid':240,1481 'proxi':1913 'pub':1236 'push':1479,1515,1615 'r8':745,757,1799 'r8/proguard':849 're':1027 'read':1159 'readi':7,48 'real':1474,1513 'receiv':1597 'recommend':1037,1132 'refer':794,1460 'referenc':740,777 'reflect':764 'refresh':1830 'refreshandretrylogin':1888 'region':137,219,371,374,1121,1157,1175,1178,1207,1225,1252,1285,1288,1337,1368,1381,1394,1546,1571,1689,1722,1723 'releas':25,668,800,808,824,836,853,1188,1399,1457,1468,1469,1508,1586,1613,1761,1772,1818 'remot':993,1009 'remote-notif':992 'remov':1988 'reopen':1630 'replac':369 'request':1720 'requir':571,651,654,712,861,899,1072,1346,1348,1350,1792 'resolv':684 'respons':357,440 'response.body':458 'rest':311,325,588 'restor':1632 'return':294,386,410,1361,1374,1387 'revers':1809 'rubi':1065 'rule':262,747,835,1456,1784 'run':851,1143 'runapp':1269 'runtim':1312 'screen':1969 'sdk':158,310,696,716,743,760,775,1795,1892,1983 'secret':145,1304,1715 'section':1786 'secur':31,69,274,1013,1050,1638,1677,1698,1890 'see':202 'send':922,943,1595 'sensit':1730,1752 'server':14,185,228,239,278,290,321,333,591,615,1416,1436,1703 'server-mint':184,1702 'server-provid':238 'server-sid':13,277,332,590,614,1415,1435 'session':1631,1925,1984 'set':132,154,214,235,474,574,893,1562,1684,1707,1816 'setup':882,1135 'ship':87,129,1104,1641 'short':192 'short-liv':191 'shrink':1824 'shrinkresourc':827 'side':15,144,279,334,592,616,1410,1417,1437,1441 'sign':1000,1932 'signout':1938 'simpl':1134 'skill' 'skill-cometchat-flutter-v6-production' 'smith':549 'sourc':1093,1525 'source-cometchat' 'stage':1328,1378 'staging/prod':1343 'standard':1673 'state':1584,1962 'static':1113,1118,1123,1166,1173,1274,1282,1352 'stay':331 'step':313,382,414 'still':892,1299,1801 'string':426,1115,1120,1125,1275,1283,1333,1336,1776 'string.fromenvironment':1169,1176 'strip':759 'subscriptiontyp':148,229,1561,1724 'success':1949 'support':77,687 'suppress':771 'switch':1357 'system':406 'tap':953 'target':856,886,999,1061,1081,1504 'termin':958 'test':1424,1471,1510,1585,1588,1600,1608,1614,1620,1627 'this.appid':1347 'this.region':1349 'this.useauthtoken':1351 'time':1140 'token':17,224,241,281,298,319,388,422,438,466,1419,1705,1735,1739,1746,1827,1833,1843,1858,1867,1874,1877 'tool':1675 'top':909 'top-level':908 'topic-agent-skills' 'topic-ai-agent' 'topic-chat' 'topic-claude-code' 'topic-cometchat' 'topic-cursor' 'topic-messaging' 'topic-nextjs' 'topic-react' 'topic-react-native' 'topic-ui-kit' 'transit':691 'transport':1012,1049 'true':680,682,810,812,826,828,1303,1341,1384,1397,1448,1463,1466,1814 'two':78 'type':355,639,802,1459 'uibackgroundmod':990 'uid':107,168,360,362,365,427,453,454,514,544,642,1758 'uikit':11,45,657,1070 'uikitset':153,163,234,576 'uikitsettingsbuild':133,215,1564,1685,1708 'understand':81 'unless':1907 'updat':538,550,556,558,563,595,611,1657 'updated.name':559 'updateus':570 'uri.parse':443 'url':1035,1055 'us':138,220,376,1158,1208,1226,1253,1289,1369,1382,1395,1574,1690 'usag':966,1560 'use':33,159,762,974,1015,1056,1098,1184,1427,1500,1701,1893,1911 'useauthtoken':1340,1370,1383,1396 'user':18,103,121,167,170,198,251,301,361,364,401,470,506,509,512,513,515,526,539,542,543,545,554,580,594,612,617,643,952,1029,1431,1654,1656,1658,1742,1857,1931 'user.name':174,255,479 'user.tojson':1743 'user.uid':1759 'v':306,307 'v6':4,12,46,658,1071 'verifi':300 'via':763,997,1529,1635 'video':919,933,1626 'visibl':1107,1694 'voic':931,1005 'voip':968,991,1495 'vs':74 'vulner':275,1678 'warn':567,772 'websocket':1986 'whitelist':1922 'without':661,833,945,964 'won':1568 'work':285,666,846,1797 'wrapwidth':1779 'wrong':1733 'x':337,621 'xcode':998 'xml':911,989,1039 'your-api.com':445 'your-api.com/cometchat/token''),':444 'yourauthservice.signout':1964 'yourbackend.getcometchattoken':245 'yourjwt':450","prices":[{"id":"c9c06bd4-bb47-40f4-b163-cdad3c02f599","listingId":"e4be1136-1dc6-4686-b579-d40f2b07edc8","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"cometchat","category":"cometchat-skills","install_from":"skills.sh"},"createdAt":"2026-05-07T13:05:11.944Z"}],"sources":[{"listingId":"e4be1136-1dc6-4686-b579-d40f2b07edc8","source":"github","sourceId":"cometchat/cometchat-skills/cometchat-flutter-v6-production","sourceUrl":"https://github.com/cometchat/cometchat-skills/tree/main/skills/cometchat-flutter-v6-production","isPrimary":false,"firstSeenAt":"2026-05-07T13:05:11.944Z","lastSeenAt":"2026-05-18T19:04:51.955Z"}],"details":{"listingId":"e4be1136-1dc6-4686-b579-d40f2b07edc8","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"cometchat","slug":"cometchat-flutter-v6-production","github":{"repo":"cometchat/cometchat-skills","stars":27,"topics":["agent-skills","ai-agent","chat","claude-code","cometchat","cursor","messaging","nextjs","react","react-native","ui-kit"],"license":null,"html_url":"https://github.com/cometchat/cometchat-skills","pushed_at":"2026-05-18T05:04:24Z","description":"Add CometChat chat to any React, Next.js, React Native, Angular, Android, iOS, or Flutter project through your AI coding agent. Works with Claude Code, Cursor, Codex, VS Code Copilot, Windsurf, Cline, Kiro, and 50+ more agents.","skill_md_sha":"5c102d972f2d2fc80fe8876cc56d82597f294213","skill_md_path":"skills/cometchat-flutter-v6-production/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/cometchat/cometchat-skills/tree/main/skills/cometchat-flutter-v6-production"},"layout":"multi","source":"github","category":"cometchat-skills","frontmatter":{"name":"cometchat-flutter-v6-production","license":"MIT","description":"Production readiness for CometChat Flutter UIKit v6 — server-side auth tokens, user management, Android ProGuard/R8, iOS Info.plist, minSdk, release build checklist, environment configuration, and security hardening. Use when preparing a CometChat Flutter app for production deployment.","compatibility":"cometchat_chat_uikit ^6.0.0-beta2"},"skills_sh_url":"https://skills.sh/cometchat/cometchat-skills/cometchat-flutter-v6-production"},"updatedAt":"2026-05-18T19:04:51.955Z"}}